TED2017
Laura Galante: How (and why) Russia hacked the US election
勞拉 · 加蘭特: 俄羅斯如何干涉美國大選
Filmed:
Readability: 5.9
2,575,021 views
黑客事件，虛假新聞，信息泡沫......近年來，越來越多人開始關注這些話題。網際空間分析師勞拉 · 加蘭特在這個演講中警告人們：你，就是政治家們想要影響的目標。
Laura Galante - Cyberspace analyst
Laura Galante profiles advanced cyber threats and network breaches and investigates the political, military and financial implications of cyber operations. Full bio
Laura Galante profiles advanced cyber threats and network breaches and investigates the political, military and financial implications of cyber operations. Full bio
Double-click the English transcript below to play the video.
00:13
Let's say you despise
0
1325
2238
假設你鄙視
西方的民主制度。
00:15
Western democracy.
1
3587
1446
00:18
Democracy, in all its trappings,
2
6592
2212
民主，佈滿了陷阱、
從投票自由、市政廳、
00:20
free elections, town halls,
3
8828
2663
到對政府角色永無止境的爭論。
00:23
endless debates about
the proper role of government.
the proper role of government.
4
11515
2836
都太亂七八糟，
00:26
Too messy,
5
14375
1333
無法預測，
00:27
too unpredictable,
6
15732
1156
不符合你的修養。
00:28
too constraining for your taste.
7
16912
1964
00:31
And the way these democracies
band together and lecture everyone else
band together and lecture everyone else
8
19711
4250
當這些民主人士勾結在一起，
向其他人宣揚自由與人權時──
00:35
about individual rights and freedoms --
9
23985
2291
總讓你覺得憤怒。
00:38
it gets under your skin.
10
26300
2040
00:41
So what to do about it?
11
29380
1444
所以，我們應該怎麼辦呢？
00:44
You can call out the hypocrisy
and failures of Western democracies
and failures of Western democracies
12
32141
4538
你可以指出西方民主的失敗和虛偽，
然後提供一種更好的制度，
00:48
and explain how your way is better,
13
36703
3229
但那種方法並不適合你。
00:51
but that's never really worked for you.
14
39956
2055
00:54
What if you could get the people
15
42716
2676
那麼，如果你能夠使那些
民主制度的支持者
00:57
whose support is the very foundation
of these democracies
of these democracies
16
45416
3140
開始懷疑這個系統呢？
01:00
to start questioning the system?
17
48580
2592
01:04
Make the idea occur in their own minds
18
52442
2448
讓他們自己產生這樣的想法：
民主及其制度正在將他們引向失敗，
01:06
that democracy and its institutions
are failing them,
are failing them,
19
54914
4112
他們眼中的精英其實都是
腐敗的演戲高手，
腐敗的演戲高手，
01:11
their elite are corrupt puppet masters
20
59050
2260
而他們的國家正在無可挽回地衰退。
01:13
and the country they knew is in free fall.
21
61334
2766
01:17
To do that,
22
65783
1274
要想做到這點，
你需要滲透進
01:19
you'll need to infiltrate
the information spheres
the information spheres
23
67081
2998
這些民主人士的圈子。
01:22
of these democracies.
24
70103
1302
你需要將他們最有力量的資產──
01:23
You'll need to turn
their most powerful asset --
their most powerful asset --
25
71429
3701
開放的思維──
01:27
an open mind --
26
75154
1905
轉變成他們最脆弱的地方。
01:29
into their greatest vulnerability.
27
77083
1982
01:32
You'll need people to question the truth.
28
80088
2052
你需要讓人們開始質疑真相。
01:36
Now, you'll be familiar of hacking
and leaks that happened in 2016.
and leaks that happened in 2016.
29
84102
4742
現在，各位都知道在 2016 年
發生的駭客攻擊和洩密事件。
發生的駭客攻擊和洩密事件。
被攻擊的網路之一是
民主黨全國委員會，
民主黨全國委員會，
01:40
One was the Democratic
National Committee's networks,
National Committee's networks,
30
88868
2822
以及民主黨成員的個人郵箱賬號，
01:43
and the personal email
accounts of its staff,
accounts of its staff,
31
91714
2831
這些信息被發表在在維基解密上。
01:46
later released on WikiLeaks.
32
94569
1853
01:49
After that, various online personas,
33
97024
2326
在那之後，許多網路上的人物,
比如一個宣稱自己是羅馬尼亞駭客，
但不會說羅馬尼亞語的人
但不會說羅馬尼亞語的人
01:51
like a supposed Romanian cybercriminal
who didn't speak Romanian,
who didn't speak Romanian,
34
99374
4880
強烈地想把這些洩密新聞
推送給新聞工作者。
推送給新聞工作者。
01:56
aggressively pushed news
of these leaks to journalists.
of these leaks to journalists.
35
104278
3506
02:00
The media took the bait.
36
108991
1796
媒體上鉤了。
他们的關注都被吸引到了
民主黨對伯尼·桑德斯的恨上。
民主黨對伯尼·桑德斯的恨上。
02:02
They were consumed by how much
the DNC hated Bernie.
the DNC hated Bernie.
37
110811
3107
02:06
At the time, it was that narrative
that far outshined the news
that far outshined the news
38
114918
4240
在那時，有一個故事，
比新聞本身更受關注：
比新聞本身更受關注：
一群俄羅斯官方駭客
02:11
that a group of Russian government
sponsored hackers
sponsored hackers
39
119182
3340
名稱為「高階持續性威脅 28 」，
02:14
who we called "Advanced
Persistent Threat 28,"
Persistent Threat 28,"
40
122546
3233
或者簡稱 APT28 ，
02:17
or "APT28" for short,
41
125803
2581
為了制約美國而發動了
這些黑客攻擊。
這些黑客攻擊。
02:20
was carrying out
these operations against the US.
these operations against the US.
42
128408
3057
02:24
And there was no shortage of evidence.
43
132192
2159
我們有充足的證據證明這點。
02:26
This group of Russian government hackers
hadn't just appeared out of nowhere
hadn't just appeared out of nowhere
44
134984
3718
這群來自俄羅斯政府的駭客並不是
在 2016 年無端出現。
02:30
in 2016.
45
138726
1164
我們從 2014 年
就已經盯上這個組織了。
就已經盯上這個組織了。
02:31
We had started tracking
this group back in 2014.
this group back in 2014.
46
139914
3157
而 APT28 所用的
破壞受害人網路的工具
破壞受害人網路的工具
02:35
And the tools that APT28 used
to compromise its victims' networks
to compromise its victims' networks
47
143095
4881
展現出其背後投入的
長期精力和資源。
長期精力和資源。
02:40
demonstrated a thoughtful,
well-resourced effort
well-resourced effort
48
148000
3593
這一項目已經進行了超過十年，
02:43
that had taken place for now over a decade
49
151617
2826
在莫斯科時區，十年如一日，
02:46
in Moscow's time zone
50
154467
1499
駭客們每天從早上九點，
工作到到下午六點。
工作到到下午六點。
02:47
from about 9 am to 6 pm.
51
155990
1986
02:51
APT28 loved to prey on the emails
and contacts of journalists in Chechnya,
and contacts of journalists in Chechnya,
52
159095
5082
APT28 經常獵捕某些特定聯繫人
和郵件：車臣共和國記者、
和郵件：車臣共和國記者、
喬治亞國政府，以及
東歐防禦部門──
東歐防禦部門──
02:56
the Georgian government,
eastern European defense attachés --
eastern European defense attachés --
53
164201
3507
所有對於俄羅斯政府來說
非常有趣的目標。
非常有趣的目標。
02:59
all targets with an undeniable interest
to the Russian government.
to the Russian government.
54
167732
4041
我們並不是唯一關注這件事的人。
03:03
We weren't the only ones onto this.
55
171797
1960
政府、全世界的研究機關
03:05
Governments, research teams
across the world,
across the world,
56
173781
3417
都得到了相似的結論，
03:09
were coming to similar conclusions
57
177222
1907
並且看到了同樣類型的操作。
03:11
and observing the same
types of operations.
types of operations.
58
179153
2321
03:14
But what Russia was doing in 2016
59
182332
3108
但俄羅斯在 2016 年做的事
遠遠超過了間諜活動。
03:17
went far beyond espionage.
60
185464
1914
03:20
The DNC hack was just one of many
where stolen data was posted online
where stolen data was posted online
61
188060
6618
民主黨全國委員會受到的黑客攻擊
只是被盜數據在線上發佈的一個例子，
只是被盜數據在線上發佈的一個例子，
伴隨著聳人聽聞的敘述，
03:26
accompanied by a sensational narrative,
62
194702
2254
然後由於媒體的光速傳播
03:28
then amplified in social media
63
196980
1938
在社交媒體上放大。
03:30
for lightning-speed adoption by the media.
64
198942
2839
03:36
This didn't ring the alarm bells
65
204836
2542
然而這並沒有響起人們的警鐘：
事實上，一個國家正試著干預
03:39
that a nation-state was trying
to interfere with the credibility
to interfere with the credibility
66
207402
4491
另一個國家的內政。
03:43
of another's internal affairs.
67
211917
1924
那麼，為什麼我們集體
沒有意識到它的到來？
沒有意識到它的到來？
03:45
So why, collectively,
did we not see this coming?
did we not see this coming?
68
213865
4662
03:51
Why did it take months
before Americans understood
before Americans understood
69
219111
3882
為什麼遠在幾個月以後，
美國人才明白
美國人才明白
他們受到的信息攻擊，
是另一個國家的操縱？
是另一個國家的操縱？
03:55
that they were under a state-sponsored
information attack?
information attack?
70
223017
4121
04:00
The easy answer is politics.
71
228456
1639
一個簡單的答案是政治。
奧巴馬陷入了一個完美的困境。
04:02
The Obama Administration was caught
in a perfect catch-22.
in a perfect catch-22.
72
230119
3923
通過讓民眾對俄羅斯政府正在
04:06
By raising the specter that the Russian
government was interfering
government was interfering
73
234066
4398
干預美國總統大選一事感到焦慮，
04:10
in the US presidential campaign,
74
238488
2092
行政當局可能會使自己
看起來像是在干擾大選。
看起來像是在干擾大選。
04:12
the Administration risked appearing
to meddle in the campaign itself.
to meddle in the campaign itself.
75
240604
4261
04:17
But the better answer, I think,
76
245992
2055
但我想，更好的答案
是美國和西方對於現代的信息化操縱
04:20
is that the US and the West
were utterly unequipped
were utterly unequipped
77
248071
3853
04:23
to recognize and respond
to a modern information operation,
to a modern information operation,
78
251948
4654
毫無任何防備，
儘管美國曾在不久前的時代
04:28
despite the fact that the US
had wielded information
had wielded information
79
256626
5112
在信息方面取得過巨大的成功。
04:33
with devastating success
in an era not so long ago.
in an era not so long ago.
80
261762
3185
04:38
Look, so while the US and the West
spent the last 20 years
spent the last 20 years
81
266284
3894
美國和西方國家
曾花費了過去 20 年時間
曾花費了過去 20 年時間
强化網路安全──
04:42
caught up in cybersecurity --
82
270202
1554
什麼樣的網路需要強化，
04:43
what networks to harden,
83
271780
1495
哪些基礎設施是關鍵，
04:45
which infrastructure to deem critical,
84
273299
2309
怎樣建立網路戰士的
軍隊和網路指令──
軍隊和網路指令──
04:47
how to set up armies of cyber warriors
and cyber commands --
and cyber commands --
85
275632
3993
而俄羅斯的想法更注重結果。
04:51
Russia was thinking in far more
consequential terms.
consequential terms.
86
279649
3733
04:57
Before the first iPhone
even hit the shelf,
even hit the shelf,
87
285322
3327
在第一個 iPhone 出現之前，
俄羅斯政府就知道了
網路技術所能提供的
網路技術所能提供的
05:00
the Russian government understood
the risks and the opportunity
the risks and the opportunity
88
288673
4473
風險和機會，
05:05
that technology provided
89
293170
1425
以及它給我們提供的即時信息交流。
05:06
and the inter-communication
and instant communication it provided us.
and instant communication it provided us.
90
294619
4411
05:12
As our realities are increasingly
based on the information
based on the information
91
300491
3217
隨著我們眼中的現實越來越基於
我們掌中得到的信息，
05:15
that we're consuming
at the palm of our hand
at the palm of our hand
92
303732
2356
以及從我們瀏覽的新聞，
05:18
and from the news feeds
that we're scanning
that we're scanning
93
306112
2253
和當下流行的標籤和故事，
05:20
and the hashtags and stories
that we see trending,
that we see trending,
94
308389
2966
俄羅斯政府是第一個意識到
05:23
the Russian government
was the first to recognize
was the first to recognize
95
311379
2927
這場技術革命是如何
05:26
how this evolution
96
314330
1875
把你的意識
變成地球上可利用資源的。
變成地球上可利用資源的。
05:28
had turned your mind into the most
exploitable device on the planet.
exploitable device on the planet.
97
316229
4789
05:34
And your mind is particularly exploitable
98
322954
2464
當你習慣於現在不受監管
05:37
if you're accustomed
to an unfettered flow of information,
to an unfettered flow of information,
99
325442
3775
又引人入勝的信息流時，
你的思想格外容易被人利用。
05:41
now increasingly curated
to your own tastes.
to your own tastes.
100
329241
3279
05:47
This panorama of information
that's so interesting to you
that's so interesting to you
101
335244
2891
這個對你來說非常有趣的全景式信息
給了一個國家，或者任何人，
一個入侵你思想的機會。
一個入侵你思想的機會。
05:50
gives a state, or anyone for that matter,
a perfect back door into your mind.
a perfect back door into your mind.
102
338159
5946
05:56
It's this new brand of state-sponsored
information operations
information operations
103
344978
3678
這一新型的，由國家支持的信息行動
成功率更高，
06:00
that can be that much more successful,
104
348680
2135
更加隱秘，
06:02
more insidious,
105
350839
1302
同時更難被目標觀眾，包括媒體，
06:04
and harder for the target audience --
that includes the media --
that includes the media --
106
352165
4086
所察覺到。
06:08
to decipher and characterize.
107
356275
1784
06:10
If you can get a hashtag
trending on Twitter,
trending on Twitter,
108
358702
2193
如果你能使一個標籤
在推特上流行起來，
在推特上流行起來，
或者用假新聞收買網路水軍，
06:12
or chum the waters with fake news
109
360919
3115
針對著準備接收這些信息的觀眾，
06:16
directed to audiences
primed to receive it,
primed to receive it,
110
364058
2441
或者讓記者們解析海量的郵件
06:18
or drive journalists to dissect
terabytes of email
terabytes of email
111
366523
2877
來尋找哪怕是一分一毫的不誠實──
06:21
for a cent of impropriety --
112
369424
1975
這都是被俄羅斯政府利用過的策略，
06:23
all tactics used in Russian operations --
113
371423
2642
這樣，你就能夠高效地
06:26
then you've got a shot at effectively
camouflaging your operations
camouflaging your operations
114
374089
4291
改變你目標的思想。
06:30
in the mind of your target.
115
378404
1804
06:33
This is what Russia's long called
"reflexive control."
"reflexive control."
116
381867
3832
這就是被俄羅斯稱作
「反射控制」的東西。
「反射控制」的東西。
06:38
It's the ability to use
information on someone else
information on someone else
117
386849
3782
這是將信息用在別人身上的能力：
這樣做，他們的選擇
06:42
so that they make a decision
118
390655
2184
是由他們自己做出的，
06:44
on their own accord
119
392863
1551
卻有利於你。
06:46
that's favorable to you.
120
394438
1543
06:50
This is nation-state-grade image control
and perception management,
and perception management,
121
398291
4079
這是一個國家
在影響和控制你的認知：
在影響和控制你的認知：
這可以用各種形式來實現：
06:54
and it's conducted by any means,
122
402394
2318
不管用什麼工具，
不管基不基於網路，都能達到目標。
不管基不基於網路，都能達到目標。
06:56
with any tools, network-based
or otherwise, that will achieve it.
or otherwise, that will achieve it.
123
404736
4299
07:01
Take this for another example.
124
409811
1430
還有另一個例子。
在 2014 年的二月初，
俄羅斯入侵克里米亞的幾週前，
俄羅斯入侵克里米亞的幾週前，
07:03
In early February 2014, a few weeks
before Russia would invade Crimea,
before Russia would invade Crimea,
125
411265
4953
有人在 YouTube 上傳了一通電話。
07:08
a phone call is posted on YouTube.
126
416242
2229
電話裡有兩個美國外交官。
07:10
In it, there's two US diplomats.
127
418495
2375
他們聽起來像是在烏克蘭玩過家家，
07:12
They sound like they're playing
kingmaker in Ukraine,
kingmaker in Ukraine,
128
420894
3194
而更糟糕的是，
他們咒罵歐盟在化解危機時
他們咒罵歐盟在化解危機時
07:16
and worse, they curse the EU
for its lack of speed and leadership
for its lack of speed and leadership
129
424112
3443
缺乏領導力和速度。
07:19
in resolving the crisis.
130
427579
1586
07:22
The media covers the phone call,
131
430067
2459
媒體報導了這個電話，
最後的外交反作用
07:24
and then the ensuing diplomatic backlash
132
432550
3338
07:29
leaves Washington and Europe reeling.
133
437183
2335
使得華盛頓和歐洲失去平衡。
07:32
And it creates a fissured response
and a feckless attitude
and a feckless attitude
134
440962
4079
糟糕的是，它使得人們
對俄羅斯在烏克蘭的侵略
對俄羅斯在烏克蘭的侵略
持有一種玩世不恭，
毫不嚴肅的態度。
毫不嚴肅的態度。
07:37
towards Russia's land grab in Ukraine.
135
445065
2130
07:40
Mission accomplished.
136
448118
1535
任務完成。
07:42
So while hacked phone calls
and emails and networks
and emails and networks
137
450648
3380
所以當駭客洩露的
電話通話、郵件和網路
電話通話、郵件和網路
一直牢牢佔據著頭條，
07:46
keep grabbing the headlines,
138
454052
2046
其背後真正的操作
07:48
the real operations are the ones
139
456122
2634
正在影響你做出的決定
07:50
that are influencing
the decisions you make
the decisions you make
140
458780
2808
和你的想法。
07:53
and the opinions you hold,
141
461612
1818
而這一切全都為
一個國家的戰略利益服務。
一個國家的戰略利益服務。
07:55
all in the service of a nation-state's
strategic interest.
strategic interest.
142
463454
3874
07:59
This is power in the information age.
143
467944
2011
這就是信息時代的力量。
08:03
And this information is all
that much more seductive,
that much more seductive,
144
471527
3444
而當它是隱秘信息時，
這個信息變得愈發吸引人，
08:06
all that much easier to take
at face value and pass on,
at face value and pass on,
145
474995
3787
傳播的速度更快。
08:10
when it's authentic.
146
478806
1382
08:12
Who's not interested in the truth
that's presented in phone calls and emails
that's presented in phone calls and emails
147
480877
5394
有誰不會對本來永遠不會公開的
藏在電話通話和郵件裡的真相
感到好奇呢？
感到好奇呢？
08:18
that were never intended
for public consumption?
for public consumption?
148
486295
2851
08:22
But how meaningful is that truth
149
490241
1754
但如果你不知道
為什麼那個真相展示給了你，
為什麼那個真相展示給了你，
08:24
if you don't know why
it's being revealed to you?
it's being revealed to you?
150
492019
2440
真相又有什麼意義呢？
08:27
We must recognize that this place
where we're increasingly living,
where we're increasingly living,
151
495966
4188
我們必須意識到
我們生活的這個地方──
我們生活的這個地方──
我們把它叫做「網路空間」，
08:32
which we've quaintly termed "cyberspace,"
152
500178
2285
並不是由 0 和 1 來定義，
08:34
isn't defined by ones and zeroes,
153
502487
2206
而是由信息和信息背後的人。
08:36
but by information
and the people behind it.
and the people behind it.
154
504717
2989
08:40
This is far more than a network
of computers and devices.
of computers and devices.
155
508828
3143
這遠不僅僅是一個
由電腦和設備構成的網路。
由電腦和設備構成的網路。
這是一個由操作電腦設備的
腦袋們所形成的網路。
腦袋們所形成的網路。
08:43
This is a network composed of minds
156
511995
3152
08:47
interacting with computers and devices.
157
515171
2399
08:50
And for this network,
158
518950
1901
而這個網路，
08:54
there's no encryption,
there's no firewall,
there's no firewall,
159
522628
3381
沒有加密，沒有防火墻，
沒有雙重認證，
08:58
no two-factor authentication,
160
526033
1723
沒有足夠複雜到保護你的密碼。
08:59
no password complex enough to protect you.
161
527780
2876
09:03
What you have for defense
162
531568
2414
你擁有的抵禦武器
遠遠更強，更具有適應性，
永遠都是最新版。
永遠都是最新版。
09:06
is far stronger, it's more adaptable,
it's always running the latest version.
it's always running the latest version.
163
534006
4447
09:11
It's the ability to think critically:
164
539310
2925
它是批判性思維：
指出錯誤的地方，
09:14
call out falsehood,
165
542259
1719
努力找到事實。
09:16
press for the facts.
166
544002
1427
09:18
And above all, you must have the courage
167
546802
4193
而最重要的，你必須要有勇氣
去堅定不移的追求真相。
09:23
to unflinchingly pursue the truth.
168
551019
2948
09:27
(Applause)
169
555752
5038
（掌聲）
ABOUT THE SPEAKER
Laura Galante - Cyberspace analystLaura Galante profiles advanced cyber threats and network breaches and investigates the political, military and financial implications of cyber operations.
Why you should listen
Laura Galante analyzes how states use cyberspace, or more precisely, our information space. She describes a domain where militaries, intelligence services, criminal groups and individuals actively pursue their interests -- with far fewer restraints than in the physical world.
A leading voice on information operations and intelligence analysis, she founded Galante Strategies in spring 2017 to assist governments and corporations in recognizing and responding to cyber and information threats.
Galante previously served as Director of Global Intelligence at FireEye where her teams investigated network activity, profiled advanced cyber threats and portrayed the political, military and financial implications of cyber operations. A founding member of Mandiant Intelligence, her work has included leading strategic analysis, developing intelligence capabilities and offerings and directing intelligence publications including APT28: A Window into Russia's State Cyber Espionage; Red Line Drawn: China Recalculates its Use of Cyber Espionage and Hacking the Street? FIN4 Likely Playing the Market among others.
In November 2016, Galante spoke at the UN Security Council's meeting on cybersecurity and international peace and security. She frequently appears on and provides commentary to CNN, Bloomberg, NPR, BBC, Fox News, the New York Times, the Financial Times, The Wall Street Journal, Reuters, the Associated Press and other global and industry media.
Prior to her work at FireEye and Mandiant, Galante led a contractor team analyzing cyber capability development and military doctrine at the US Department of Defense. She supported the 2010 US-Russia bilateral information security talks.
Galante holds a J.D. from the Catholic University of America and a BA in Foreign Affairs and Italian from the University of Virginia.
Laura Galante | Speaker | TED.com